Security Flaw in Venere Software from Compugroup Medical

CVE-2026-118450

What is CVE-2026-118450?

Venere, a software provided by Compugroup Medical, is installed in a location outside of the typical Program Files directory. This configuration allows the application to load and register unsigned components from directories where unprivileged users can create files. This behavior opens up the possibility for malicious actors to exploit the software by placing malicious unsigned components in the designated paths, leading to unauthorized actions within the application.

References